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Cloud technology is advancing at a rapid pace. Many applications and 
multimedia data are hosted in the cloud, Security, confidentiality, and 
efficiency are the key drawbacks of cloud computing. There are a variety of 
access control systems on the market to secure the data and applications on 
the cloud. But key generation time is a major flaw both in multi-authority 
and single authority systems. Cipher policy attribute-based encryption (CP- 
ABE) is one of many cryptographic algorithms available for ensuring user 
confidentiality which provides fine-grained access control. It also addreses a 
number of issues related attribute revocation, key generation time, and issues 
in handling a large number of attributes. We present a mechanism called 
key-cipher-policy-based ABE (KCP) in this article, which is a hybrid 
approach and combines CP-ABE and KP ABE approaches which result in 
handling a wide range of attributes, an efficient key generation process, and 
addresses challenges in attribute revocation. 
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1. INTRODUCTION 

Cloud computing as a technology makes a big shift from the traditional thinking to the usage of 
information technology (IT) resources. Cloud service providers supply a variety of services through the 
internet for a fee. This is a combination of parallel and distributed computing technologies where work is 
performed simultaneously on several units. The user will rent resources from the cloud services provider, 
who will not have to worry about maintenance and can focus on the task at hand. As technology progresses, 
multimedia is becoming increasingly important in the present environment. Multimedia is a powerful 
communication tool. Multimedia includes video, animation, music, and other mediums. Multimedia can be 
preserved on storage devices, but with the advent of cloud computing, more enterprises are turning to storage 
services. Storage-as-a-service is the most popular types of cloud computing. A cloud service provider 
delivers cloud-based services. Multimedia data stored on a data storage in the cloud. When storing and 
accessing multimedia data, the data storage server has privacy and security difficulties. We're focusing on 
work-related security concerns as well as issues with attribute revocation in conjunction with secure access 
control. We must protect the majority of data stored in cloud storage because it is highly sensitive. Secure 
attribute revocation is also required to protect the security of the user's data. A primary challenge is secure 
access to multimedia data housed in cloud data centers. 

When it comes to security, data encryption is the most effective way to safeguard sensitive data from 
unauthorised access. Earlier public key encryption often called as identity encryption, requires that encrypted 
data be encrypted by a single user. However, it lacks advanced data interchange capabilities. To overcome this 
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problem, the attribute based encryption (ABE) algorithm was developed of the identity based encryption 
concept, in which a set of descriptive attributes rather than a single string is utilized to define the user's identity. 
In comparison to identity-based encryption, ABE enables flexible one-to many encryption instead of one-to-one 
encryption. Schemes [1]-[5] uses attribute based encryption but they lacks in providing efficient encryption and 
decryption time. Schemes it is thought to be a possible answer to the problem of fine-grained, safe, and secure 
data exchange as well as decentralised access. Cipher policy attribute based encryption (CP-ABE) is one of the 
most efficient cryptographic methods for providing fine-grained access control to cloud data, but it has 
shortcomings in key generation efficiency, scalability, attribute revocation flexibility, and access to a wide 
variety of attributes. Schemes [6]-[18] proposes schemes using CP-ABE but they do not support wide range of 
attributes. We present a novel key-cipher-policy (KCP) strategy, which combines the traditional CP-ABE and 
traditional KP-ABE approaches, to provide efficient encryption for secure access to multimedia data at cloud 
storage facilities. It makes key generation more efficient. Analyze the results for multimodal content such as text, 
image, audio, and video, compare them to existing schemes, and show that our technique is efficient. 


2. RELATED WORK 

An attribute-based encryption technique was presented by Boneh and Franklin [19] (ABE). This 
system adds an access policy to the ciphertext or for the key which is used for decryption instead of encrypting 
to specific users. Cryptography will make data access self-enforcing as a result of encryption. Waters proposed 
a CP-ABE method based on matrix structure [20]. The time required for encryption and decryption, as well as 
the sizes of the private key and ciphertext, rise linearly with the number of attributes. 

Sangeetha and Karthik [21] proposed hybrid key-attribute based encryption. This paper will go over 
the access structure tree and also user attributes. This solves the shortcoming of KP-ABE while also 
shortening the time required for encryption and produce keys. This concept suits earlier procedures, however, 
it does not produce adequate results with modern systems. Huanh and Su put forth an identity-based access 
control solution for digital content on CP-ABE [22]. To share the digital files to several users, this method takes 
less storage space. This architecture works well when compared to a conventional access control list. This 
model includes minimum security features. 

Vignesh [23] introduced a hybrid attribute-based encryption system that uses expressive policies 
with dynamic attributes for encryption of data. In his study, he blends attribute-based encryption ciphertext 
policy, symmetric AES encryption, and a location-based approach. This architecture provides location-based 
secure collaboration and can be used to provide end-to-end secure attribute-based communications and 
identity management. 


3. KEY CIPHER POLICY BASED ABE 
KP-ABE provides efficient ways of access control but it has less flexibility and scalability features. 

On the other hand CP-ABE provides efficient encryption and key generation but not efficient access control. 

We developed a model in which two ABE techniques, KP-ABE and CP-ABE, were merged to achieve secure 

and fine grained access control while also reducing the time required to generate a key and also encryption 

time. The model is known as key-cipher-policy-ABE [24]. There are four algorithms in key-cipher-policy 

ABE. 

— Setup (Pxc,Mkxc): Let us assume the bilinear group of the prime of order P is believed to be Gp. g bet on 
the Gp Generator. Consider the following: GixGj—Gp denotes a bilinear map, and K, a security 
parameter, denotes group size. It employs two hash functions: Hxc:0,1*Gi and H1xc: Gj0, 1log p. It makes 
public the parameter Pk(exc, g, Gp, Y. Tixc | iu) and employs the master key Mkxc as: (y, ti jiu). 

— key generation: It creates the private keys or users by executing KeyGen(Mkxc, Skxc). This algorithm 
receives the message(Mkc) and the attributes sets (Sxc). These are considered to be the input and it 
outputs a secret key that holds attributes in S(set of attributes). Input: public key(Pkx.), message (Mkxc), 
attribute-associated access structure (Taxe). 

It selects two input, and random exponents, ri € RZp* and rj € RZp* where ri and rj are unique 
secret keys to the user Ui and Uj respectively €Sabe. then it provides the private key to the user. 


Skut = (Dkc = g(a+ri)/B, VAjeESkc (1) 


Djkc = gri.H'kc(Aj)rj) (2) 
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- Data encryption: In the provided tree access structure, an encryption method is utilised to encrypt 
messages depending on the user attributes (Tke). Let us refer to Tgc's leaf nodes as Kx. The data owner 
computes Sykc=(e(g), Hke(y)) for all y Y in the access tree's leaf node, and then computes H1 ke (Syxe). 

The encryption process encrypts the message M using the tree access structure Txc and user 
attributes. The process begins by selecting a polynomial qxkc for each node in the tree Tke, which includes 
leaves; every node in the tree is represented as Xk. Beginning with the node assumed to be the root Rxc, 
polynomials are chosen using a top-down approach. Set the degree dx. of the polynomial qxx to be less than 
the threshold value of kxxc .dxxc = kxxc-1 for each xxc node in the tree starting with Rxc, the method 
chooses a random attribute set S, Zp, and sets qRxc(0) =S. Then, to fully define the polynomial qRxc, it 
randomly selects dRxc and other points from qR, polynomial. For each other node xxc, it sets qxxc(0) = 
qxcparent(xxc)(index). 


CTkc = T (3) 
C'kc = Me(g, g’) as (4) 
Ckc = HskC, Y y EY (5) 
CyKC = g qyKC(0) (6) 
C'yKC = HKC(att(y)) qyKC(0) (7) 


- Decryption: A recursive decryption process is used. The recursive algorithm first runs Decrypt (CTxc, 
Skxc, x). It accepts ciphertext CTxc = (Txc, C'xc, Cxe, y Y: Cyxe, C’yxc) and a private key Skxc which is 
associated with an attributes set S and a Txc node xxc as input. If node xxc is regarded as a leafy node, 
then i=att(xxc), and if I Sxc, then (8). 


ekc(Dikc, Cxkc) 


D t(CTkc, Skkc, xke) = — ee 
ecrypt(CTke, Skkc, xke) eabe(D'ikc, C'xkc) 


_ ekc(gr. Hkc(i)ri, hqxkc(0)) 
~ eke(gri, Hkc(i)qxkc(0)) 


= ekc(g,g).rqxkc(0) ...... +. (8) 


4. RESULTS AND DISCUSSION 

We employ a simulator in our study to implement key cipher policybased ABE. We compared the 
time required by our approach for key generation, encryption, and decryption to that of hybrid attribute based 
encryption (HABE) [25] and shown in Figure 1. The KC-ABE key generation time is not directly 
proportional to the number of at tributes as shown in Figure 1(a). The decryption algorithm is applied on a set 
of cipher texts for which encryption is done with policy tress of varying sizes produced at random. Beginning 
with root nodes, the trees are built by periodically linking the child to a randomly picked node till enough leaf 
nodes are generated. A random threshold was set for each internal node. 

A key is picked consistently and randomly from the keys which are accessible and that fulfil the 
policy's parameters for each run. This is accomplished by iteratively considering attribute subsets random on 
the tree's leaves. The access tree influences decryption time. The number of attributes included in the private 
key determines the encryption time as shown in Figure 1(b). The number of attributes accessible also 
influences the length of time it takes to decrypt as in Figure I(c). 

We examine the algorithms' performance. Our PC configuration is an 11 Gen Intel(R) Core(TM) 
i5-1135G7 @ 2.40GHz 1.38 GHz with 4 GB RAM and a 64-bit OS system. In simulation, we utilise a key 
size of 128 bits. Analysis of encryption time and decryption time for multimedia data is done as shown in 
Figure 2. For the text file as shown in Figure 2(a), It demonstrates that encryption exhibits a linear curve as 
the load grows, however decryption takes less time than encryption. The encryption and decryption times for 
image files increase approximately linear, and the approach works well for image files as shown in Figure 2(b). 
The encryption and decryption time curves for audio files in Figure 2(c) indicate that the encryption curve 
increases linearly with file size and decryption takes longer than the encryption time curves. The time 
required to encrypt and decrypt a video file increases linearly with the increase in file size as in Figure 2(d). 
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Figure 1. Comparision of performance of key-cipher-policy based ABE with respect with hybrid attribute 
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Figure 2. Analysis of encryption and decryption time for multimedia data: (a) encryption and decryption time 
for text file, (b) encryption and decryption time for image file, (c) encryption and decryption time for audio 


file, and (d) encryption and decryption time for video file 
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5. CONCLUSION 

Our effort focused on the implementation and execution of the KCP algorithm. The scheme is 
applied, and the results are compared to similar procedures. It demonstrates that the new strategy outperforms 
the existing system. The encryption and decryption time with text, audio, image, and video data is also 
analysed and proven to be efficient. We can keep multimedia data private and confidential as compared to 
existing methods. We employed a hybrid technique in which the KP-ABE and CP-ABE algorithms were 
merged to allow secure and fine-grained access to multimedia content stored in cloud storage facilities. The 
suggested system's performance in terms of key generation time, encryption time, and decryption time is 
examined and shown to be efficient and secure. To address the limitations of flexibility and scalability, key- 
cipher policy-based ABE can be utilised for attribute revocation in the future. 
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